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IN THE CLAIMS 

1. (Previously Presented) A method for communications of a message crypto graphically 
processed with RSA (Rivest, Shamir & Adleman) public key encryption, comprising the steps 
of: 

developing k distinct random prime numbers pi, p2,.",pk, where k is an integer greater than 2; 
providing a number e relatively prime to (pi -l)-(p2 -l)'...*(pk -1); 
providing a composite number n equaling the product prpi*. . .'Pk; 

receiving a ciphertext word signal C which is formed by encoding a plaintext message word 
signal M to a ciphertext word signal C, where M corresponds to a number representative 
of the message and 
0<M<n-l, 

where C is a number representative of an encoded form of the plaintext message word 
signal M such that C=M^ (mod n), and where e is associated with an intended recipient of 
the cipherhext word signal C; and 
deciphering the received ciphertext word signal C at the intended recipient having available to it 
the k distinct random prime number pi, p2, ... Pk- 

2. (Previously Presented) The method according to claim 1, wherein the deciphering step 
includes 

establishing a number, d, as a multiplicative inverse of e(mod(lcm((pi -1), (pa -1), ... , 
(Pk-l)))),and 

decoding the ciphertext word signal C to the plaintext message word signal M where 
M=cVod n). 

3. (Previously Presented) A method for communications of a message signal Mi 
cryptographically processed with RSA public key encryption in a system having j terminals, each 
terminal being characterized by an encoding key Ej =(ei, nj) and a decoding key Di=(di, nj), where 
i=l, 2, ... , j, and the meassage signal Mj corresponds to a number representative of a message- 
to-be-received from the i^^ terminal, the method comprising the steps of: 

establishing ni where ni is a composite number of the form 
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where k is an integer greater than 2, 

pi,i, Pi,2, - pi,k are distinct random prime numbers, 

Ci is relatively prime to lcm(pi,i -1, Pi,2-1, ... Rk -1), and 

di is selected from the group consisting of the class of numbers equivalent to a 
multiplicative inverse of 
ei(mod(lcm((pi,i -1), (pi2 -1), (Pi,k -1)))); 
receiving by a recipient terminal (i = y) from a sender terminal (i = x, x 7^ y) a ciphertext signal 
Cx formed by encoding a digital message word signal Mx, wherein the encoding includes 
transforming said message word signal Mx to one or more message block word signals 

Mx", each block word signal Mx" corresponding to a number representative of a 

portion of said message word signal Mx in the range 0< Mx"<ny -1, and 
transforming each of said message block word signals Mx" to a ciphertext word signal Cx 

that corresponds to a number representative of an encoded form of said message 

block word signal Mx" where Cx = Mx"^^ (mod ny); and 
deciphering the received ciphertext word signal Cx at the recipient terminal having 

available to it the k distinct random prime numbers pyj, py,2, py,k for 

establishing its dy. 

4. (Currently Amended) A system for communications of a message cryptographically processed 

with an RSA pubUc key encryption comprising: 

a communication channel for transmitting a ciphertext word signal C; 

encoding means coupled to said channel and adapted for transforming a transmit message word 
signal M to the ciphertext word signal C using a composite number, n, where n is a 
product of the form 
n=pi p2"...Tk 

k is an integer greater than 2, and 

pi, P2, ... Pk are distinct random prime numbers, where the transmit message word signal 

M corresponds to a number representative of the message and 
0< M < n-1 
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where the ciphertext word signal C corresponds to a number representative of an encoded 
form of said message through a relationship of the form 
C=_M^ (mod n), and 

where e is a number relatively prime to [[lcm(pl - l,p2-l, ...,pk-l)]] lcm(pi - l,p2-l, 
...,Pk-l); and 

decoding means coupled to said channel and adapted for receiving the ciphertext word signal C 
from said channel and, having available to it the k distinct random prime number pi, p2, 
... pk, for transforming the ciphertext word signal C to a receive message word signal M' 
where M* corresponds to a number representative of a decoded form of the ciphertext 
word signal C through a relationship of the form M =_C'^ (mod n) 
where d is selected from the group consisting of a class of numbers equivalent to a 
multiplicative inverse of 
e(mod(lcm((pi -1), (p2 -1), (pk-1)))). 



,g 5. (Previously Presented) A system for communications of a message crytographically 
p processed with an RSA public key encryption, the system having a plurality of terminals coupled 
ill by a conmiunications channel, comprising: 

a first terminal of the plurality of terminals characterized by an encoding key 
Ea = (ca, nA) and a decoding key Da = (dA, nA), 
i-s: where ua is a composite number of the form 

nA=PA,rPA,2/ . . . *PA,k 

where 

k is an integer greater than 2, 

Pa,i, pA,2, . PA,k are distinct random prime numbers, 
Ca is relatively prime to 
lcm(pA,i-l, pA,2-l, pA,k-l), and 

dA is selected from the group consisting of the class of numbers equivalent to a 

multicative inverse of 
eA (mod(lcm((pA,i -1), (Pa,2-1), (pA,k -1)))); and 

a second terminal of the plurahty of terminals having blocking means for transforming a 
first message, which is to be transmitted on said communications channel from 
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said second terminal to said first terminal, into one or more transmit message 
word signals Mb, where each Mb corresponds to a number representative of said 
first message in the range of 0<MB<nA-l, 
encoding means coupled to said channel and adapted for transforming each transmit 
message word signal Mb to a ciphertext word signal Cb that corresponds to a 
number representative of an encoded form of said first message through a 
relationship of the form 
Cb -Mb (mod ua), 
said first terminal having 

decoding means coupled to said channel and adapted for receiving each of said ciphertext 

word signals Cb form said channel and, having available to it the k distinct 
random prime numbers pa,i, Pa,2, - PA,k, for transforming each of said ciphertext word 

signals Cb to a receive message word signal M'b, and 
means for transforming said receive message word signal M'b to said first message, 
where M'b corresponds to a number representative of a decoded form of Cb 
through a relationship of the form 
M'B=CB^^(mod nA). 

J 6. (Previously Presented) The system according to claim 5 wherein said second terminal is 

characterized by an encoding key EB=(eB, nB) and a decoding key DB=dB, ns), where 
3 nB is a composite number of the form 

I^B = pB,l PB,2*."*PB,k 

where k is an integer greater than 2, 

pB,i, pB,2, ... pB,k are distinct random prime numbers, 

eB is relatively prime to 

lcm(pB,i -1, Pb,2-1), (pB,k -1), and 

dB is selected from the group consisting of class of numbers equivalent to a multiplicative 
inverse of 

eB (mod(lcm((pBa-l), (pb,2-1), ... , (pB,k-l)))), 
said first terminal further having 
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blocking means for transforming a second message, which is to be transmitted on said 
communications channel from said first terminal to said second terminal, to one 
or more transmit message word signals Ma, where each Ma corresponds to a 
number representative of said message in the range 0<MA<nB-l 

encoding means coupled to said channel and adapted for transforming each transmit 
message word signal Ma to a ciphertext word signal Ca and for transmitting Ca 
on said channel, where Ca corresponds to a number representative of an encoded 
form of said second massage through a relationship of the form 

Ca =Ma^^ (mod Hb) 
said second terminal further having 

decoding means coupled to said channel and adapted for receiving each of said ciphertext 
word signals Ca from said channel and, having available to it the k distinct 

random prime numbers Pb,i, Pb,2, ... pB,k, for transforming each of said ciphertext word 
signals to a receive message word signal Ma, and 

means for transforming said receive message word signals M a to said second message, 
where M a corresponds to a number representative of a decoded form of Ca 
through a relationship of the form Ma = Ca*^^ (mod nB). 

7. Cancelled 

8. Cancelled 

9. (Previously Presented) A system for conmiunications of message signals 
cryptographically processed with RSA public key encryption, comprising: 

j terminals including first and second terminals, each of the j terminals being characterized by an 
encoding key Ei=(e„ n-,) and decoding key Di-(di, nO, where i=l,2,...,j, each of the j 
terminals being adapted to transmit a particular one of the message signals where an i^*^ 
message signal M, is transmitted from an i^^ terminal, and 
o<Mi<ni-l, 

Ui being a composite number of the form 
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nppi.i pi,2 ... Pi,k 
where 

k is an integer greater than 2, 
Pi,i, Pi,25 . . . Pi,k are distinct random prime numbers, 
ei is relatively prime to 
lcm(pij-l, pi,2-l, ... Pi,k -1), and 

di is selected from the group consisting of the class of numbers equivalent 
to a multiplicative inverse of 
ei(mod(lcm((pi,i-]), (pi,2-l), (Rk-1)))); 
said first terminal including 

means for encoding a digital message word signal Mi to be transmitted from said 
first terminal (i=l) to said second terminal (i=2), said encoding means 
transforming said digital message word signal Mi to a signed message 
word signal Mu using a relationship of the form 

, 4 1 

'• j;! Mis = Ml (mod ni); and 

means for transmitting said signed message word signal M^ from said first terminal to said 
second terminal, wherein said second terminal includes 

means for decoding said signed message word signal M^ to said digital message word 
signal Ml. 



□ 10. (Previously Presented) The system of claim 9, wherein the means for decoding said 

t ; i 

signed message word signal Mas includes means for transforming said signed message 
word signal Mas using a relationship of the form 
Mi-Mis (mod m). 

ill. (Previously Presented) A communications system for transferring a message signal 
cryptographically processed with RSA pubhc key encryption, the conmiunications system 
comprising: 

j conmiunication stations including first and second stations, each of the j communication 
stations being characterized by an encoding key Ei=(ei,ni) and a decoding key Di =(d„ nj), 
where i-1, 2, j, each of the j communication stations being adapted to transmit a 
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particular one of the message signals where an i*^ message signal Mj is received from an 

i^^ communication station, and 

0<Mi<ni-l 

ni being a composite number of the form 

Hi = RrR2*...'Rk 
where 

k is an integer greater than 2, 

pi.i, Pi,2, Pi,k are distinct random prime numbers, 

Ci is relatively prime to 1cm (pij -1, pi,2 -1, Rk -1), and 

di is selected from the group consisting of the class of numbers equivalent to a 

multiplicative inverse of 

ei(mod(lcm((pu-l), (pu-l), (Rk-1)))), 
I said first station including 

means for encoding a digital message word signal Mi to be transmitted from said first 
station (i=l) to said second station (i=2), 

means for transforming said digital message word signal Mi to one or more message 
block word signals Mi", each block word signal Mi" being a number 
representative of a portion of said message word signal Mi in the range 

0<Mi"<n2-l,and 

means for transforming each of said message block word signals Mi" to a ciphertext 
word signal CI using a relationship of the form Ci=M"i^^ (mod n2); and 
means for transmitting said ciphertext word signals Ci from said first station to said second 
station, wherein said second station includes 

means for deciphering said ciphertext word signals Ci using p2,i, P2,2 P2,k to produce 
said message word signal Mi. 

12. (Previously Presented) The communications system of claim 11, wherein the deciphering 
means includes 

! means for decoding said ciphertext word signals Ci to said message block word signals 

Ml" using a relationship of the form 
:M"i=Ci^^ (mod n2),and 

I 
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means for transforming said message block word signals Mi" to said message 
word signal Mi. 

13. Cancelled 

14. (Previously Presented) A method of communicating a message cryptographically 
processed with an RSA public key encryption, comprising the steps of: 

selecting a public key portion e associated with a recipient intended for receiving the message; 

developing k distinct random prime numbers, pi, pi, ... Pk, where k > 3, and checking that each 
of the ki distinct random prime numbers minus 1, pi-1, p2-l, ... pk-1, is relatively prime 
to the pubhc key portion e; 

computing a composite number, n, as a product of the k distinct random prime numbers; 

receiving a ciphertext message formed by encoding a plaintext message data M to the ciphertext 
message data C using a relationship of the form C=M^ (mod n), where M represents the 
message, where 0<M<n-l and where the sender knows n and the public key portion e but 
has no access to the k distinct random prime numbers, pi, p2, . . . pk; and 

deciphering at the recipient the received ciphertext message data C to produce the message, the 
recipient having access to the k distinct random prime numbers, pi, p2, ... Pk. 

15. (Previously Presented) The method according to claim 14, comprising the further step of: 
establishing a private key portion d by a relationship to the public key portion e in the form of d 

^e-Vmod((pi-l)-(p2-l)-(pk-l))), 
wherein the deciphering step includes decoding the ciphertext message data C to the plaintext 
message data M using a relationship of the form M=C'^ (mod n). 

16. (Previously Presented) A method of communicating a message cryptographically 
processed with RSA pubhc key encryption, comprising the steps of: 

selecting a public key portion e; 
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developing k distinct random prime numbers, pi, pi, ... Pk, where k > 3, and checking that each 
of the k distinct random prime numbers minus l,pi-l,p2-l, ... pk-1, is relatively prime to 
the pubhc key portion e; 

establishing a private key portion d by a relationship to the public key portion e in the form of d 

^c' (mod((pi-l>(p2-l)-(pk-l))); 
computing a composite number, n, as a product of the k distinct random prime numbers; 
receiving a ciphertext message data C representing an encoded form of a plaintext message data 

M; and 

decoding the received ciphertext message data C to the plaintext message data M using a 
relationship of the form M^C^ (mod n), the decoding performed by a recipient owning 
the private key portion d and having access to the k distinct random prime numbers, pi, 
p2, . . . Pk. 

Cj 

17. (Previously Presented) The method according to claim 16, wherein the ciphertext 
message data C is formed by encoding the plaintext message data M to the ciphertext message 

^ data C using a relationship of the form C^M^ (mod n), wherein 0<M<n-l and wherein n and the 
|,;!;" public key portion e are accessible to the sender although it has no access to the k distinct 
i:! random prime numbers, pi, p2, ... Pk- 

pi 

18. (Previously Presented) A method of communicating a message cryptographically 
Q processed with RSA public key encryption, comprising the steps of: 

selecting a public key portion e; 

developing k distinct random prime numbers, pi, p2, ... pk, where k > 3, and checking that each 
of the k distinct random prime numbers minus 1, pi-1, p2-l, ... pk-1, is relatively prime to 
the public key portion e; 

establishing a private key portion d by a relationship to the public key portion e of the form d = e* 

; ^mod((pi-l)<p2-l)-(pk-l))); 

I 

computing a composite number, n, as a product of the k distinct random prime numbers; 
encoding a plaintext message data M with the private key portion d to produce a signed message 

Ms using a relationship of the form Ms^M"^ (mod n), where 0<M<n-l 
receiving the signed message Ms; and 
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deciphering the signed message to produce the plaintext message data M, 

19, (Previously Presented) The method of claim 18, wherein the deciphering step includes: 
decoding the signed message Ms with the public key portion e to produce the plaintext message 

data M using a relationship of the form M=Ms^ (mod n). 

20. (Previously Presented) A method for communicating a message cryptographically 
processed with RS A public key encryption, comprising the steps of: 

sending to a recipient a cryptographically processed message formed by assigning a number M to 
represent the message in plaintext message form, and 

cryptographically transforming the assigned number M from the plaintext message form 
to a number C that represents the message in an encoded form, wherein the 
Q number C is a function of 

the assigned number M, 

a number n that is a composite number equaling the product of at least three 

distinct random prime numbers, wherein 0<M<n-l, and 
an exponent e that is a number relatively prime to a lowest common multiplier of 
the at least three distinct random prime numbers, 
wherein the number n and exponent e having been obtained by the sender are associated 
with the recipient to which the message is intended; and 
receiving the cryptographically processed message which is decipherable by the recipient based 



I- 

nj 



on 



the number n, 

another exponent d, and 

the number C, 

wherein the exponent d is a function of the exponent e and the at least three distinct 
random prime numbers. 

21. (Previously Presented) The method according to claim 20, 

Iwherein the cryptographically transforming step includes using a relationship of the form C=M^ 
j (mod n), 
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wherein the exponent d is established based on the at least three distinct random prime numbers, 
Pi, p2,-pk^ ^sing a relationship of the form d -e*^ (mod((pi-l)*(p2-l)-(pk-l))), and 

wherein the cryptographically processed message is deciphered using a relationship of the form 
M=C'* (mod n). 

22. (Previously Presented) A method for communicating a message cryptographically 
processed with RSA public key encryption, comprising the steps of: 

receiving from a sender a cryptographically processed message, in the form of a number C, 
which is decipherable by the recipient based on a number n, an exponent d, and the 
number C; and 
deciphering the cryptographically processed message, 

wherein a number M represents a plaintext form of the message, wherein the number C 
Q represents a cryptographically encoded form of the message and is a function of 

IJ1 the number M, 

% the number n that is a composite number equaling the product of at least three distinct 

^'^"^ random prime numbers, wherein 0<M<n-l, and 

111 an exponent e that is a number relatively prime to a lowest conmion multiplier of the at 

j" ^ least three distinct random prime numbers, 

C3 wherein the number n and exponent e are associated with the recipient to which the 

™ message is incended, and 

wherein the exponent d is a function of the exponent e and the at least three distinct 

) ] t , 

'.:r;7 

random prime numbers. 

23. (Previously Presented) The method according to claim 22, 

wherein the number C is formed using a relationship of the form C=M^ (mod n), 

wherein the exponent d is established based on the at lest three distinct random prime numbers, 

pu Pi, ... Pk, using a relationship of the form d = e"^ (mod((pi-l)'(p2-l)"<pk-l))), 
and wherein the number M is obtained using a relationship of the form M=C^ (mod n). 

I 

i 24. (Previously Presented) The method according to claim 21, 

1 wherein p and q are a pair of prime numbers the product of which equals n, 

i 
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wherein the deciphering the number C to derive the number M is divided into subtasks, one 

subtask for each of the k distinct random prime numbers, 
wherein the k distinct random prime numbers are each smaller than p and q, 
whereby for a given length of n it takes fewer computational cycles to perform the deciphering 

relative to the number of computational cycles for performing such deciphering if the pair 

of prime numbers p and q were instead. 

25. (Previously Presented) The method according to claim 22, 

wherein p and q are a pair of prime numbers the product of which equals n, 

wherein the deciphering the number C to derive the number M is divided into subtasks, one 

subtask for each of the k distinct random prime numbers, 
wherein k distinct random prime numbers are each smaller than p and q, 
Q whereby for a give length of n it takes fewer computational cycles to perform the deciphering 
|t| relative to the number of computational cycles for performing such deciphering if the pair of 
prime numbers p and q were used instead. 

m 26. (Previously Presented) The method according to claim 20, 

wherein p and q are a pair of prime numbers the product of which equals n, and wherein 
Q developing the at least three distinct random prime numbers and computing n is performed, 
-1^ including for n that is more than 600 digits long, in less time than it takes to develop the pair of 
Q prime numbers p and q and compute that n. 

! ; : 

27. (Previously Presented) The method according to claim 22, 

wherein p and q are a pair of prime numbers the product of which equals n, and 
wherein developing the at least three distinct random prime numbers and computing n is 
performed, including for n that is more than 600 digits long, in less time than it takes to develop 
the pair of prime numbers p and q and compute that n. 

28. (Previously Presented) The method according to claim 14, 
wherein p and q are a pair of prime numbers the product of which equals n, 
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wherein the deciphering step is divided into sub-steps, one sub-step for each of the k distinct 

random prime numbers, 
wherein the k distinct random prime numbers are each smaller that p and q, 
whereby for a given length of n it takes fewer computational cycles to perform the deciphering 
step relative to the number of computational cycles for performing such deciphering step if the 
pair of prime numbers p and q were used instead. 

29. (Previously Presented) The method according to claim 14, 

wherein p and q are a pair of prime numbers the product of which equals n, and 

wherein developing the k distinct random prime numbers and computing the composite number 

n are performed, including for n that is more than 600 digits long, in less time than it takes to 

develop the pair of prime numbers p and q and compute that n. 

D 

13^ 30. (Previously Presented) The method according to claim 16, 

wherein p and q are a pair of prime numbers the product of which equals n, 

;£ wherein the decoding step is divided into sub-steps, one sub-step for each of the k distinct 
random prime numbers, 
wherein the k distinct random prime numbers are each smaller than p and q, 
whereby for a given length of n it takes fewer computational cycles to perform the decoding step 

; relative to the number of computational cycles for performing such decoding step if the pair of 

C3 prime numbers p and q were used instead. 

31. (Previously Presented) The method according to claim 16, 

wherein p and q are a pair of prime numbers the product of which equals n, and 
wherein developing the k distinct random prime number and computing the composite n is 
performed, including for n that is more than 600 digits long, in less time than it takes to develop 
the pair of prime numbers p and q and compute that n. 

32. (Previously Presented) The method according to claim 18, 
wherein p and q are a pair of prime numbers the product of which equals n, 




! 
i 



Page 14 



Application No. 09/694,416 
Docket No. 6215-000124/US/RED 

wherein the encoding step is divided into sub-steps, one sub-step for each of the k distinct 

random prime numbers, 
wherein the k distinct random prime numbers are each smaller than p and q, 
whereby for a given length of n it takes fewer computational cycles to perform the encoding step 
relative to the number of computational cycles for performing such encoding step if the pair of 
prime numbers p and q were used instead. 

33. (Previously Presented) The method according to claim 18, 

wherein p and q are a pair of prime numbers that product of which equals n, and 
wherein developing the k distinct random prime numbers and computing the composite number 
n is performed, including for n that is more than 600 digits long, in less time than it takes to 
develop the pair of prime numbers p and q and compute that n. 

13 

34. (Previously Presented) The method according to claim 14, wherein a message 
'=£ cryptographically processed by the sender with two-rime RSA public key encryption 
yi, characterized by n being equal to a composite number computed as the product of 2 prime 

numbers p and q, is decipherable with multi-prime (k>2) RSA pubhc key encryption 
\^'' characterized by the composite number n being computed as the product of the k distinct random 
jS" prime numbers, pi, p2, . - Pk- 

i 'hi 

Q 

'■^'^ 35. (Currently Amended) The method according to claim 9, wherein the signed message 
word signal M^, formed from the digital message word signal Mi being cryptographically 
processed at the first terminal with multi-prime (k>2) RSA public key encryption which is 
characterized by the composite number n being computed as the product of the k distinct random 
prime numbers, pi, p2, ... [[pk]l pk, is decipherable at the second terminal with two-prime RSA 
public key encryption characterized by n being equal to a composite number computed as the 
product of 2 prime numbers p and q. 

i 
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36. (Previously Presented) The method according to claim 16, wherein a message 
cryptographically processed by the sender with two-prime RSA public key encryption 
characterized by n being equal to a composite number computed as the product of 2 prime 
numbers p and q, is decipherable by the decoding with multi-prime (k>2) RSA public key 
encryption characterized by the composite number n being computed as the product of the k 
distinct random prime numbers, pi, p2, ... Pk. 

37. (Previously Presented) The method according to claim 18, wherein the signed message 
Ms, formed from the plaintext message data M being cryptographically processed at the sender 
with multi-prime (k>2) RSA public key encryption which is characterized by the composite 
number n being computed as the product of the k distinct random prime numbers, pi, p2, . . . Pk, is 
decipherable by the decoding at the recipient with two-prime RSA public key encryption 

!□ characterized by n being equal to a composite number computed as the product of 2 prime 
numbers p and q. 

g 38. (Previously Presented) The method according to claim 20, wherein a message 
ji'i cryptographically processed by the sender with two-prime RSA public key encryption 
characterized by n being equal to at composite number computed as the product of 2 prime 

Q numbers p and q, is decipherable at the recipient with multi-prime RSA public key encryption 

1'^ [ 

i characterized by the composite number n being computed as the product of the at least three 
i3 distinct random prime numbers. 

39. (Previously Presented) The method according to claim 22, wherein a message 
cryptographically processed by the sender with two-prime RSA public key encryption 
characterized by n being equal to a composite number computed as the product of 2 prime 
: numbers p and q, is decipherable at the recipient with multi-prime RSA public key encryption 

I characterized by the composite number n being computed as the product of the at least three 
! distinct random prime numbers. 

40. (Previously Presented) A cryptography method for local storage of data by a private key 
~ owner, 
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comprising the steps of: 
selecting a public key portion e; 

developing k distinct random prime numbers, pi, p2, ... pk, where k > 3, and checking that each 
of the k distinct random prime numbers minus 1, pi-l, P2-I, ... Pk-l, is relatively prime to 
the public key portion e; 

establishing a private key portion d by a relationship to the public key portion e in the form of 

d^e^ (mod((pi-l)'(p2-l)-(pk-l))); 
computing a composite number, n, as a product of the k distinct random prime numbers that are 

factors of n, where only the private key owner knows the factors of n; and 
encoding plaintext data M to ciphertext data C for the local storage, using a relationship of the 

form C=M^ (mod n), wherein 0<M<n-l, whereby the ciphertext data C is decipherable 

only by the private key owner having available to it the factors of n. 

□ 

jSj 41. (Previously Presented) The cryptography method in accordance with claim 40, further 
''3 comprising the step of: 

^ decoding the ciphertext data C from the local storage to the plaintext data M using a relationship 
of the form (mod n). 

i.i 

H 42. (Previously Presented) A cryptographic communications system, comprising: 
: a plurality of stations; 

Q a conmiunications medium; and 

hi 

a host system adapted to communicate with the plurality of stations via the communications 
medium sending a receiving messages cryptographically processed with an RSA public key 
encryption, the host system including 

at least one cryptosystem configured for 

developing k distinct random prime numbers, pi, p2, . .., Pk, where k > 3, 

checking that each of the k distinct random prime numbers minus 1, pi-1, p2-l, ... pk-1, is 

relatively prime to a public key portion e that is associated with the host system, 
computing a composite number, n, as a product of the k distinct random prime numbers, 
establishing a private key portion d by a relationship of the public key portion e in the 
form of d ^ 0' (mod((prl)-(p2-l)-(pk -1))), 
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in response to an encoding request from the host system, encoding a plaintext message 
data M producing therefrom a ciphertext message data C to be communicated via 
the host system, the encoding using a relationship of the form C=M^ (mod n), 
where 0<M<n-l, 

in response to a decoding request from the host system, decoding a ciphertext message 
data C communicated via the host producing therefrom a plaintext message data 
M' using a relationship of the form M =C'^ (mod n). 



43. (Previously Presented) A system for communications of a message cryptographically 
processed with RSA public key encryption, comprising: 
a bus; and 

a cryptosystem communicatively coupled to and receiving from the bus encoding and 
13 decoding requests, the cryptosystem being configured for 

providing a public key portion e, 
4:} developing k distinct random prime numbers, pi, p2, ... pk, where k > 3, 

checking that each of the k distinct random prime numbers minus 1, pi-1, pi-l, ... 
pi Pk-1, is relatively prime to the public key portion e, 

computing a composite number, n, as a product of the k distinct random prime numbers, 
estabUshing a private key portion d by a relationship to the public key portion e in the 



2 form of d^e ' (mod((pi-l)-(p2-l) - (pk-l))), 

CI in response to an encoding request from the bus, encoding a plaintext form of a first 

message M to produce C, a ciphertext form of the first message, using a 
relationship of the form C^M^ (mod n), where 0<M<n-l, and 
in response to an decoding request from the host system, decoding C, a ciphertext form 
of a second message, to produce M', a plaintext form of the second message, 
using a relationship of the form M =C a (mod n), the first and second messages 
beign distinct or one and the same. 

'44. (Previously Presented) The system of claim 42, wherein the at least one cryptosystem 
I includes 
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a plurality of exponentiators configured to operate in parallel in developing respective 
subtask values corresponding to the message. 

45. (Previously Presented) The system of claim 42, wherein the at least one cryptosystem 
includes 

a processor, 

a data-address bus, 

a memory coupled to the processor via the data-address bus, 

a data encryption standard (DES) unit coupled to the memory and the processor via the 
data-address bus, 

a plurality of exponentiator elements coupled to the processor via the DES unit, the 
plurality of exponentiator elements being configured to operate in parallel in 
|;3 developing respective subtask values corresponding to the message. 

:^ ' 

■5 46. (Previously Presented) The system of claim 45, wherein the memory and each of the 
% plurality of exponentiator elements has its own DES unit that cryptographically processes 
message data received/returned from/to the processor. 

!;! 

\£ 47. (Previously Presented) The system of claim 45, wherein the memory is partitioned into 
llJ address spaces addressable by the processor, including secure, insecure and exponentiator 
p elements address spaces, and wherein the DES unit is configured to recognize the secure and 
exponentiator elements address spaces and to automatically encode message data therefrom 
before it is provided to the exponentiator elements, the DES unit being bypassed when the 
processor is accessing the insecure memory address spaces, the DES unit being further 
configures to decode encoded message data received from the memory before it is provided to 
jthe processor. 



48. (Previously Presented) The system of claim 45, wherein the at least one cryptosystem 
meets PIPS (Federal Information Processing Standard) 140-1 level 3. 



I Page 19 

I 



Application No. 09/694,416 
Docket No. 621 5-000 124/US/RED 

49. (Previously Presented) The system of claim 45, wherein the processor maintains in the 
memory the public key portion e and the composite number n with its factors pi, p2,. . .pk. 

50. (Previously Presented) A system for communications of a message cryptographically 
processed with RSA pubhc key encryption, comprising: 

a bus; and 

a cryptosystem receiving from the system via the bus encoding and decoding requests, the 
cryptosystem including 

a plurality of exponentiator elements configured to develop subtask values, 

a memory, and 

a processor configured for 

receiving the encoding and decoding requests, each encoding request providing a 

plaintext message M to be encoded, 
obtaining a public key that includes an exponent e and' a modulus n, a 
'If representation of the modulus n existing in the memory in the form of its k 

distinct random prime number factors pi, p2, . . . Pk, where k > 3, 
j^^ constructing subtasks, one subtask for each of the k factors, to be executed by the 

^ exponentiator elements for producing respective ones of the subtask 

p values, Ci, C2, ... Ck, and 

^ forming a ciphertext message C from the subtask values Ci, C2, . . . Ck, 

Q wherein the ciphertext message C is decipherable using a private key that includes 

j : 1 

the modulus n and an exponent d which is a function of e. 

51. (Previously Presented) The system of claim 50 wherein each one of the subtasks Ci, C2, 
. . . Ck is developed using a relationship of the form Ci ^ Mi (mod pi), where Mi = M (mod pi) , 
and Ci ^ e(mod pi - 1), and where i=l,2,. . .k. 

52. (Previously Presented) A system for communications of a message cryptographically 
processed with RSA public key encryption, comprising: 

a bus; and 
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a cryptosystem receiving from the system via the bus encoding and decoding requests, the 
cryptosystem including 

a pluraUty of exponentiator elements configured to developed subtask values, 

a memory, and 

a processor configured for 

receiving the encoding and decoding requests, each encoding/decoding request 
provided with a plaintext/ciphertext message M/C to be encoded/decoded 
and with or without a public/private key that includes an exponent e/d and 
a modulus n a representation of which exists in the memory in the form of 
its k distinct random prime number factors pi, p2, . . .pk, where k >3, 
obtaining the public/private key from the memory of the encoding/decoding 
request is provided without the public/private key, 
i"3 constructing subtasks to be executed by the exponentiator elements for producing 

^ respective ones of the subtask values. Mi, M2,. . .Mk,/Ca, C2,. . .Ck, and 

forming the ciphertext/plaintext message CfM from the subtask values Ci, C2,... 
I: CkMi,Mi,...Mk. 

i" 53. (Previously Presented) The system of claim 52 wherein when produced each of the 
subtasks Ci, C2, . . .Ck is developed using a relationship of the form Ci = M^' (mod pi), where Ci = 
1 -f C (mod Pi), and ei = e(mod pi-1), and where i =1, 2, . . .k. 

54. (Previously Presented) The system of claim 52 wherein when produced each one of the 
subtasks Mi, M2, ... Mk is developed using a relationship of the form Mi=Ci ^ (mod pi), where 
Mi =M (mod Pi), and di ^ d (mod pi - 1), and where i=l,2,. . .k. 

;55. (Previously Presented) The system of claim 54, wherein the private key exponent d 
relates to the public key exponent e via d = e'^ (mod((pi-l)-(p2-l)"'(pk-l))). 

56. (Previously Presented) A system for communications of a message cryptographically 
processed with RSA public key encryption, comprising: 
means for selecting a pubHc key portion e; 
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means for developing k distinct random prime numbers, pi, pa, ... Pk, where k > 3, and for 

checking that each of the k distinct random prime numbers minus 1, pi-l, P2-l,...pk-l, is 

relatively prime to the public key portion e; 
means for establishing a private key portion d by a relationship to the public key portion e in the 

form of d - e^ (mod((pi-l)-(p2-l)-<Pk-l))); 
means for computing a composite number, n, as a product of the k distinct random prime 

numbers; 

means for receiving a ciphertext message data C; and 

means for decoding the ciphertext message data C to a plaintext message data M using a 
relationship of the form (mod n). 

57. (Previously Presented) The system according to claim 56, further comprising: 
? means for encoding the plaintext message data M to the ciphertext message data C, using a 
relationship of the form C=M^ (mod n), where 0<M <n-l. 



58. (Previously Presented) A system for conmiunications of a message cryptographically 
vj\ processed with 

!' RSA pubUc key encryption, comprising: 
□ means for selecting a public key portion e; 

rn 

jjr means for developing k distinct random prime numbers, pi,p2,...Pk, where k>3, and for checking 
that each of the k distinct random prime numbers minus 1, pi-1, p2-l, . . .pk-1, is relatively 

UJ 

prime to the public key portion e; 
means for establishing a private key portion d by a relationship to the public key portion of the 

form d = (mod((pi-l)-(p2-l)'"(Pk-l))); 
means for computing a composite number, n, as a product of the k distinct random prime 

numbers; and 

'means for encoding a plaintext message data M with the private key portion d to produce a 
I signed message Ms using a relationship of the form Ms^ (mod n), where 0<M< n-1, 

I the signed message Ms being decipherable using the public key portion e. 



1 59. (Previously Presented) The system of claim 58 further comprising the step of: 
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means for encoding the signed message Ms with the public key portion e to produce the plaintext 
message data M using a relationship of the form M = Ms^(mod n). 

60. (Previously Presented) The system of claim 57, wherein the system can communicate the 
cryptographically processed message to another system that encodes/decodes data with RSA 
public key encryption using a modulus value equal to n independent of the k distinct prime 
numbers. 

61. (Previously Presented) The system of claim 59, wherein the system can communicate the 
cryptographically processed message to another system that encodes/decodes data with RSA 
public key encryption using a modules value equal to n independent of the k distinct prime 
numbers. 
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REMARKS 

This amendment is filed in response to the final office action mailed April 11, 2003. 

I. STATUS OF THE CLAIMS 

As of the date of this Amendment, claims 1-6 and 9-12, 14-61 remain pending. Claims 4 
and 35 have been amended and claims 7 and 13 have been cancelled as a result of this response. 

II. OBJECTION TO THE SPECIFICATION 
A. New Matter 

Sections 11-16 of the Office Action indicate that Applicants' previous amendment of 
September 16, 2002 has been objected to under 35 U.S.C. § 132 as having allegedly introduced 
new matter into the specification. 

In Section 12, the Examiner objects to the replacement to the term "using" with the term 
"extending". Applicants assert that the conventional RSA scheme uses two primes, whereas the 
present invention uses three or more. In this context. Applicants believe that the present 
invention "extends" the number of primes from two to three or more. As a result, Applicants 
believe that the present invention "extends" the RSA scheme. Accordingly, reconsideration and 
withdrawal of the objection is respectfully requested. 

In Section 13, the Examiner asserts that the change that "three or more random large, 
distinct primed numbers are developed and checked to ensure that each (pi-1) is relatively prime 
to e" is new matter. 

Applicants direct the Examiner's attention to originally filed independent claim 1, filed on 
January 16, 1997 which recites e is a number relatively prime to (pi-1) * (P2-I) (Pk-1). 
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Accordingly, Applicants respectfully submit that the change to column 5, lines 31-33, merely 

brings the specification into comphance with original claim 1. Further, Applicants respectfully 

submit that one of ordinary skill in the art would recognize that the equation recited at column 5, 

line 39 would not work if three or more random large distinct prime numbers were not relatively 

prime to e. Accordingly, reconsideration and withdrawal of this rejection is respectfully 

requested. 

In Section 14, the Examiner asserts that the amendment to column 5, line 52, to add a 
digital signature, is not supported. However, AppUcants have been unable to locate the addition 
of a "digital signature" in Apphcants previous response. Clarification of this rejection is 
requested. 

In Section 15, the Examiner asserts that the amendment to the specification to column 6, 
I? line 24 to change "i > 2" to "2< i < k where k is the number of primes in n" constitutes new 

jjl matter, 

h. 

Applicants respectfully submit that this change merely more accurately recites the 

a 

p-^ teachings of the present invention. As set forth clearly throughout the specification, there are no 

rtstr. 

prime numbers beyond pk; accordingly, it makes absolutely no sense to indicate prime numbers 
greater than equal to 2, but unbounded by the number of prime numbers k. Accordingly, 
Applicants respectfully submit that this is not new matter, but merely a reflection of the upper 
bound of the number of k primes, which the change of which. Applicants believe more 
accurately represents the present invention. However, although less accurate, Applicants are 
willing to leave this portion of the specification as "i>2". 

In Section 16, with regard to column 6, hne 65, the Examiner asserts that the change from 
i "the decrypted message M can be obtained" to "the ciphertext C can be obtained" is new matter. 
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The Examiner further asserts that in the first version, summation is required, wherein the second 

version iteration is required. 

In response to this objection, Applicants respectfully submit that there are at least two 

know solutions for the Chinese Remainder Theorem. The first, proposed by Gauss, is a 

sunamation technique, and therefore not recursive. The second, proposed by Gamer, is a 

recursive technique. Applicants respectfully submit that the original patent describes Gamer's 

technique beginning at column 6, line 1 and Gauss' technique, beginning at column 7, line 1. 

Since the present appUcation supports both recursive and non-recursive solutions, Apphcants 

assert that the Amendment to column 6, line 65 does not constitute new matter. 

□ 

m m. CLAIM OBJECTIONS 

In Sections 21 and 22, the Examiner points out minor informalities in the previous 
amendments to claims 4 and 35. Applicants have amended claims 4 and 35 to correct these 
minor informalities. 

Q 
ni 

□ IV. CLAIM REJECTIONS UNDER 35 U.S.C. § 1 12 
A. 35 U.S.C. § 1 12, FIRST PARAGRAPH 

In Section 24, claim 1 is rejected under 35 U.S.C. § 112, first paragraph but no specific 
rejection is set forth. Applicants assume this rejection is related to the objection to the 
specification under 35 U.S.C. § 132 and therefore traversed for the reasons set forth above, 
j In Sections 25 and 26, the Examiner asserts that claims 1-2, 18-19, 32-33, 37, 42-49, and 

|56-61 are rejected under 35 U.S.C. § 112, first paragraph, because the patent as originally filed 

I 

does not disclose k > 3. Applicants respectfully submit that column 3, line 27-29 of the original 

I 
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Collins et al. patent recite that it is an object of the present invention is to provide a system and 

method for utilizing "multiple (more than tv^o) distinct prime number components to create n." 

Further, column 3, Hnes 40-41 of the original CoUins et al. patent recite that "n is developed 

from three or more distinct prime numbers; i.e., n = pi'p2*...pk, where k is an integer greater than 

two." Finally, column 5, lines 66-67 recite an example assuming three distinct primes, pi, p2, 

and p3. Accordingly, Applicants respectfully submit that an amendment reciting k is an integer 

greater than two is supported by multiple passages in the original CoUins et al. patent. 

In Sections 27-29, the Examiner asserts that claims 1-61 are rejected under 35 U.S.C. § 

112, first paragraph, objecting to the term "random". The Examiner correctly points out that the 

□ term random is utiHzed in the original patent at column 5, line 31 and is therefore supported by 
ij;' the original patent. Applicants assert that this disclosure supports the claims as amended. 

't;: In Applicants previous Response, Applicants asserted that "the randomness and 

1,^,, distinctness attributes of the k prime numbers will materially improve the security in any 

cryptographic system with RSA public key encryption", 
jlj With respect to this statement, the Examiner asserts that if this were the intent of the 

J ; 
pa 

□ original patent, the original patent does not support this view. Applicants respectfully submit 

that the above statement is an advantage of the present invention. Advantages of the present 
invention need not be provided in the specification In re Chu , 36 U.S.P.Q.2d 1089 (Fed.Cir. 
1995). Accordingly, Applicants respectfully submit that claims 1-61 are supported by the 
ioriginal specification, because random is provided in the original patent, and any purported 
advantage of the randomness need not be present in the original patent. 



i 



Page 27 



Application No. 09/694,416 
Docket No. 6215-000124/US/RED 

In Sections 30 and 31, the Examiner rejects claims 7 and 13 for failing to describe how 

the equation recited therein is carried out. Applicants direct the Examiner's attention to the 

cancellation of independent claims 7 and 13, which render this rejection moot. 



B. 35 U.S.C. 1 12, SECOND PARAGRAPH 



In Sections 32 and 33, the Examiner objects to the relationship in claims 7 and 13 as 
being used to mean an "RSA pubHc encryption". Applicants direct the Examiner's attention to 
the cancellation of independent claims 7 and 13, which render this rejection moot. 

In Section 34, the Examiner objects to amended claim 9, specifically the word "means" is 

P 

ifl not followed by a function. Applicants have reviewed claim 9 and are unsure of the Examiner's 
rejection, in particular, each means clause of claim 9 appears to recite a function. 

Ch 

f VI. CLAIM REJECTION UNDER 35 U.S.C. § 103 
□ A. SUMMARY OF CLAIM REJECTIONS 

ii i 

i-i • In sections 35-76 of the Office Action, claims 1-7, 9-61 are rejected under 35 U S C § 

a 

UJ 103(a). In sections 36-65 of the Office Action, claims 1-7, 9-61 are rejected under 35 U.S.C. § 
103(a) as being unpatentable over U.S. Patent 4,405,829 to Rivest et al., henceforth RSA, and 
further in view of Rivest et al. "A Method for Obtaining Digital Signatures and Public-key 
Cryptosystem", Communications of the ACM, 21(2) February 1978, henceforth Rivest and 
further in view of Knuth, The Art of Computer Programming Vol. 2, page 179. 
; In formulating the rejection of claims 1-7 and 9-61 in view of RSA, Rivest, and Knuth in 
paragraphs 35-39, the Examiner picks and chooses various portions of three pubhcations to piece 
together the subject matter of the present claims. Applicants assert that it impermissible to use 
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the claimed invention as an instruction manual or template to piece together the teachings of the 

prior art so that the claimed invention is rendered obvious. It is established U.S. patent law that 

one cannot use hindsight reconstruction to pick and choose among isolated disclosures in the 

prior art to deprecate the claimed invention. 

Obviousness can not be established by combining the teachings of the prior art to produce 

the claimed invention, absent a teaching or suggestions supporting the combination. Under § 

103, the teachings of references can be combined only if there is some suggestion or incentive to 

do so. Applicants further respectfully submit that this tenant of U.S. patent law also applies to 

separate embodiments of the same patent or patent publication. Applicants respectfully submit 

!3 that the Examiner has not set forth any reasons why one of ordinary skill in the art would pick 

\^ and choose various teachings of the RSA patent, the Rivest publication, and Knuth, in order to 

piece together the invention recited in the presently pending claims. Accordingly, Applicants 

p respectfully submit that claims 1-7 and 9-61 are allowable for at least this reason. 

In Sections 66-68, claims 7 and 13 are rejected in view of RSA and Rivest and further in 

U 

ry view of Schwenk US 5,835,598. This rejection is moot in light of the cancellation of these 
□ claims. 

In Sections 69-70, claims 1-6, 11-12, 14-17, 20-31, 34-36, 38-44, 50-57, 60-61 are 
rejected under 35 U.S.C. § 102(b) as being anticipated by Vanstone and Zuccherato, "Using 
four-prime RSA in which some bits are Specified", Electronic Letters, 30(25), 16 August 1994, 
: henceforth Vanstone. 

I In paragraph 70, the Examiner asserts that "Vanstone selects random primes even though 

he makes bit assignments in an expanding product AppUcants respectfully submit that this 
statement is wholly unsupported by Vanstone. Vanstone makes absolutely no mention of 
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random prime numbers. Accordingly, Applicants respectfully submit that claims 1-6, 11-12, 14- 

17, 20-31, 34-36, 38-44, 50-57, and 60-61 are allowable for at least this reason. 

In Sections 72-74, claims 1-6, 9-12, 14-31, 34-36, 38-44, and 50-61 are rejected under 35 

U.S.C. § 103(a) as being unpatentable over Nemo (RSA Moduli Should Have 3 Prime Factors), 

and further in view of Rivest et al. 

With respect to Nemo, Applicants respectfully assert that this publication was submitted 

by Applicants during prosecution of the original application with no date, since applicants were 

unable to ascertain the publication date of the Nemo paper. Nemo was printed on the front of 

U.S. Patent 5,848,159 with "No Date or Publication Given". 
1^1 During the prosecution of the present application, the Examiner has adopted the 

iJ1 publication date of Nemo as August 1996, relying on a footnote on page 1 which states "the 

original version of this article may be obtained from Scientific Bulgarian Magazine, August 

i 5 

j;:^ 1996". Applicants respectfully assert that the fact this paper was submitted by a pseudonym as 
^ "Captain Nemo" and alleges to have been published in a fictitious publication, namely "Scientific 
py Bulgarian", casts sufficient doubt as the date of the publication to render it insufficient to be 
p relied upon as prior art agamst the present application. As set forth in M.P.E.P, § 706.02(a), the 
Examiner must determine the issue or publication date of a reference of a proper comparison 
between the application and the reference dates can be made. Applicants respectfully assert that 
the fictitious author in a fictitious journal, namely "Scientific Bulgarian", cast doubt on the 
accuracy of August 1996 as a publication date. Until the Examiner is able to verify the 

publication date of the Nemo publication as qualifying as prior art against the present application 

I 
I 

under 35 U.S.C. § 102(a) or (b) Apphcants respectfully submit that Nemo cannot be applied 

i 
I 
I 
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against the present application. Accordingly, reconsideration and withdrawal of this rejection is 

respectfully requested. 

In Section 75, claims 1-6, 11-12, 14-17, 20-31, 34-36, 38-44, and 50-61 are rejected 

under 35 U.S.C. § 103(a) as being unpatentable over Itakura and Nakamura, A Public-Key 

Cryptosystem Suitable for Digital Multisignatures, NEC Res. & Develop. No. 71, October, and 

further in view of Rivest et al. This rejection, insofar as it pertains to the presently pending 

claims, is respectfully traversed for the following reasons. 

Initially, Applicants respectfully submit that the scheme described in Itakura and 

Nakamura provides no security. Accordingly, the purpose of this pubhcation is completely 

Q different from the purpose of the present invention. 

t - ! 
•,«3f 

The goal of the Itakura et al. scheme is to create signatures appropriate for use in a 
business hierarchy. An individual at a higher level has a different "r" from an individual at a 
If^ lower level and the lower level employee should not be able to forge the higher rank signature. 
|.^,^, Accordingly, Applicants respectfully submit that Itakura et al. is irrelevant to the present 

n 

|1J invention. Additionally, in exemplary embodiments of the present invention, all the primes are 
Q part of the private key and the security relies on the primes not being known. As set forth above, 
in Itakura et al., the third prime "r" is pubUc. Accordingly, Apphcants respectfully submit that 
claims 1-6, 11-12, 14-17, 20-31, 34-36, 38-44, and 50-61 are allowable over Itakura et al. for at 
least this reason. Additionally, an advantage of exemplary embodiments of the present invention 
is to obtain the security of a large "n" by increasing the number factors, instead of the size of the 
factors. In contrast, Itakura et al. stated in the first paragraph of 3.3 that increasing the length of 
the third prime "r" increases the length of "n" without increasing the security of the system. 
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For the reasons set forth above, Applicants respectfully assert that claims 1-6, 11-12, 14- 

17, 20-31, 34-36, 38-44, and 50-61 are allowable over Itakura et al. in view of Rivest et al. 



CONCLUSION 

Accordingly, in view of the above amendments and remarks, reconsideration of the 
objections and rejections and allowance of each of claims 1-6, 8-12, and 13-61 in connection 
with the present apphcation is earnestly sohcited. 

Pursuant to 37 C.F.R, §§1.17 and 1.136(a), AppHcant(s) hereby petition(s) for a three (3) 
month extension of time for filing a reply to the outstanding Office Action. The fee for 

□ extension fee of $950.00 is being paid under the Notice of Appeal concurrently filed herewith. 
I? Should there be any outstanding matters that need to be resolved in the present 
'tii application, the Examiner is respectfully requested to contact John A. Castellano at the telephone 
l^, number of the undersigned below. 

If necessary, the Commissioner is hereby authorized in this, concurrent, and future 

Q 

jlj replies, to charge payment or credit any overpayment to Deposit Account No. 08-2025 for any 

□ additional fees required under 37 C.F.R. § 1.16 or under 37 C.F.R. § 1.17; particularly, extension 

hi 

of time fees. 



Respectfully submitted, 

HARNESS, DICKEY, & PIERCE, P.L.C. 



JAC/cah 
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